6.3 Medium
CVE-2024-42218
No description published yet
Vendor not yet named
Status
- Not in CISA KEV
- Fixed in version 8.10.38
Exploit probabilityEPSSchecked 25 Oct
0.2%probability of exploitation in the next 30 days
Higher than 10% of scored CVEs
SeverityCVSS
6.3Medium
Description NVD
1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms.
Coverage 1 article · 1 outlet
- 1Password to require hardware token PIN on desktop apps July 2026SecurityOnline · first in our coverage